Provide 'too many failed authentication attempts' security alert

**Is your feature request related to a problem? Please describe.**
We already write a security event upon successful van failed authentication, but we do nothing we possible malicious activity that could be detected with too many failed authentication attempts.

**Describe the solution you'd like**
We should consider adding a configurable threshold that will track a security alert when too many failed authentications are being monitored.

**Describe alternatives you've considered**
This could also reflect in the HTTP response, but maybe in a later phase.

The issue does not name files or tests; first locate where successful and failed authentication security events are written. Clarify the configurable threshold, tracking scope, and alert behavior, then add coverage showing that exceeding the threshold records the requested security alert.

Written by the indexing model from the issue text.